McDonald's, one of the world's largest food chains, said its systems were accessed and the personal information of its customers and employees in the USA, South Korea and Taiwan was stolen.
The data breach in question came to light after the company hired external security consultants to investigate intrusion activity into an internal security system.
What is Accessed Data?
In a message to U.S. employees, the company said the attackers had accessed business contact information, restaurant seating, franchisees' contact information, and footage of playgrounds. The breach was first reported by the Wall Street Journal.
Personal information accessed from McDonald's customers in South Korea and Taiwan are as follows;
- Names
- E-mails
- Phone numbers
- Addresses
In a message to U.S. employees, McDonald's said the breach disclosed certain business contact information for U.S. employees and franchisees, as well as certain information about restaurants, such as seating capacity and square feet of playgrounds. The company said that no customer data was breached in the US, and the employee data exposed was not sensitive or personal. The company advised employees and franchisees to monitor phishing emails and use common sense when asked for information.
McDonald's said the attackers stole the emails, phone numbers and addresses of its delivery customers in South Korea and Taiwan. McDonald's said that in Taiwan, hackers also stole employee information, including names and contact information. The company said the number of files exposed was small, without disclosing the number of people affected. McDonald's said the breach did not include customer payment information.
Source:
https://cybersecuritynews.com/mcdonalds-hacked/
https://www.wsj.com/articles/mcdonalds-hit-by-data-breach-in-south-korea-taiwan-11623412800
